CVE-2023-38646

CVE-2023-38646 Metabase Pre-auth RCE!! Consultez le POC d'exploitation manuelle : https://youtu.be/b51LPjD-uTo...

CVE-2021-22911-RocketChat

CVE-2021-22911 — Rocket.Chat 3.12.1 RCE Improvisé Description Exploite une vulnérabilité d'injection NoSQL pré-authentification dans Rocket.Chat 3.12.1 pour divulguer le secret TOTP de l'administrateur et le jeton de réinitialisation de mot de passe, prendre le contrôle du compte administrateur e...

CVE-2025-31161

CVE-2025-31161 Доказательство концепции для CVE-2025-31161 / CVE-2025-2825 Этот POC будет эксплуатировать уязвимость обхода аутентификации для создания новой учетной записи с правами администратора. Для обхода аутентификации требуется имя пользователя targetuser существующего пользователя на...

CVE-2022-46169

CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Injection de commande non authentifiée. Contournement d'authentification Ajoutez l'en-tête X-Forwarded-For pour contourner l'authentification, notez que sa valeur n'est pas une valeur fixe. Force brute Utilisez Burp Intruder pour fuzzer les...

CVE-2019-11539

CVE-2019-11539 Découverte originale : Orange Tsai, Meh Chang Auteurs : Justin Wagner, Alyssa Herrera Remerciements à : Orange, Meh Chang, Rich Warren, Alyssa, Mimir Description de la vulnérabilité Dans Pulse Secure Pulse Connect Secure version 9.0RX avant 9.0R3.4, 8.3RX avant 8.3R7.1, 8.2RX avant...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: libceph: Defined and enforced the CEPHMAXKEYLEN. When decoding the key, verify that the key material fits into a fixed-size buffer in processauthdone, and that its length is reasonable. The new CEPHMAXKEYLEN check replaces the...

Astra Linux – Vulnerability in freerdp3

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, an unvalidated authlength field read from the network triggered a WINPRASSERT failure in rtsreadauthverifiernochecks, causing any FreeRDP client connecting through a malicious RDP Gateway to crash with...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source RDP server. Versions up to 0.10.5 have a heap-based buffer overflow in the EGFX graphics dynamic virtual channel implementation, due to insufficient validation of client-controlled size parameters. This allows for out-of-bounds writes via crafted PDUs. Pre-authentication...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: nvmet-auth: Assign dhkey to NULL after kfreesensitive. ctrl-dhkey may be used across multiple calls to nvmetsetupdhgroup for the same controller. Therefore, it’s better to set it to NULL after a error-free release, in order to...

Astra Linux – Vulnerability in dovecot

Dovecot OTP authentication is vulnerable to replay attacks under certain conditions. If the auth cache is enabled, and the username is changed in passdb, then the OTP credentials can be cached, making the same OTP response valid. An attacker who can observe the OTP exchange can log in as the user...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In libceph, the error from monhandleauthdone should be returned. Currently, any error from cephauthhandlereplydone is propagated via finishauth, but it is not returned from monhandleauthdone. This results in higher layers...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: libceph: Potential out-of-bounds writes have been prevented in the handleauthsessionkey function. The len field originates from untrusted network packets. Boundary checks have been added to prevent potential out-of-bounds writes...

Astra Linux – Vulnerability in xrdp

XRDPT is an open-source remote desktop protocol RDP server. In versions prior to 0.9.23, improper handling of session establishment errors allowed bypassing OS-level session restrictions. The authstartsession function could return a non-zero value 1 in the event of, for example, PAM errors. This...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: The issue with the gssauth kref leak in the gssallocmsg error path has been fixed. Commit 5940d1cf9f42 “SUNRPC: Rebalancing the kref in authgss.c” includes a call to krefget&gssauth-kref to balance the gssputauth...

CVE-2020-13942

CVE-2020-13942 Apache Unomi pré-auth RCE Exploit CVE-2020-13942 POST /context.json HTTP/1.1 Host: x.x.x.x User-Agent: Mozilla/5.0 Windows NT 10.0; WOW64 AppleWebKit/537.36 KHTML, like Gecko Chrome/72.0.3626.81 Safari/537.36 SE 2.X MetaSr 1.0 Content-Type: application/json Content-Length: 200...

poc-CVE-2026-0073

CVE-2026-0073 PoC Обход аутентификации TLS в беспроводном ADB Этот каталог содержит Python-концепт PoC для CVE-2026-0073. Скрипт создан с использованием методов генерации кода с помощью ИИ. Краткое описание CVE-2026-0073 — это логическая ошибка в проверке сертификатов демона ADB adbdtlsverifycert...

Threaded-CVE-2018-15473

CVE-2018-15473 — Инструмент перебора имен пользователей SSH Репликация на Python 3 классического эксплойта перечисления пользователей OpenSSH CVE-2018-15473, расширенная многопоточностью, поддержкой wordlist, автоматическим обнаружением уязвимости и потокобезопасным патчем эксплойта. Содержание О...

XM_ONVIF_auth_bypass

CVE-2025-65856 - Обход аутентификации ONVIF на IP-камерах XM 530 Код для проверки концепции Bash и Python для CVE-2025-65856, где реализация ONVIF в IP-камерах Xiongmai XM530 позволяет неаутентифицированный доступ к конфиденциальной информации устройства и прямым видеопотокам: Примеры эксплуатаци...

CVE-2026-90898

Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.authconfig.isenabled=false. Auth off means every caller is a local admin...

CVE-2021-27876

CVE-2021-27876 Exploit RCE non authentifié pour l'agent Veritas Backup Exec CVE-2021-27876/77/78 — contournement de l'authentification SHA vers SYSTEM via NDMP CVEs CVE| Description| CVSS 3.1 ---|---|--- CVE-2021-27876| Contournement de l'authentification via manipulation du hachage SHA dans le...